XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: OTP 23
    • Fix Version/s: OTP 23
    • Component/s: ssl
    • Labels:
      None

      Description

      (this actually impacts `23.0-RC3` however this was not available in the versions list)

       

      When making a request to a site that does not support TLS v1.3 (such as erlang.org) the request fails.

       

      Using either the default versions or `['tlsv1.3', 'tlsv1.2']` results in the following error:

       

       application:ensure_all_started(ssl), application:ensure_all_started(inets), httpc:request(get, {"https://erlang.org", []}, [{ssl, [{versions, ['tlsv1.3', 'tlsv1.2']}]}], []).
      {error,{failed_connect,[{to_address,{"erlang.org",443}},
       {inet,[inet],
       {tls_alert,{decrypt_error,"TLS client: In state certify at ssl_connection.erl:1052 generated CLIENT ALERT: Fatal - Decrypt Error\n"}}}]}}
      
      

       

      Using `['tlsv1.2']` works as expected:

       

       

      application:ensure_all_started(ssl), application:ensure_all_started(inets), httpc:request(get, {"https://erlang.org", []}, [{ssl, [{versions, ['tlsv1.2']}]}], []).
       
      {ok,{{"HTTP/1.1",200,"OK"}, [{"date","Sat, 25 Apr 2020 13:46:09 GMT"},
      

       

      Using `['tlsv1.3']` fails as expected with a protocol error:

       

       

      application:ensure_all_started(ssl), application:ensure_all_started(inets), httpc:request(get, {"https://erlang.org", []}, [{ssl, [{versions, ['tlsv1.3']}]}], []).
       
      {error,{failed_connect,[{to_address,{"erlang.org",443}}, {inet,[inet], {tls_alert,{protocol_version,"TLS client: In state hello at tls_handshake.erl:201 generated CLIENT ALERT: Fatal - Protocol Version\n"}}}]}}
      

       

      The same request works when using 23.0-rc2

        Attachments

          Activity

            People

            Assignee:
            ingela Ingela Anderton Andin
            Reporter:
            gazler Gary
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: